Cyber, critical infrastructure & AI standards — all in one place.

The latest standards, laws and regulations, with curated metadata, mapped controls and expert guidance from 6clicks. Built for GRC, compliance and security teams.

Browse by industry

Browse by sector. Each page shows relevant standards, laws, regulations, and frameworks.

Explore all industries

Content Library

Showing 11 of 31

GRCStandard

ISO 14001 — ISO 14001:2026 - Environmental management systems

ISO 14001:2026 is the internationally recognized standard for environmental management systems (EMS). It offers a framework for organizations to improve environmental performance through methods including resource optimization, waste management, and stakeholder engagement.

International Organization for Standardization (ISO) • v2026

View details
AIStandard

ISO/IEC 42001 — ISO/IEC 42001:2023 - Artificial Intelligence Management System

ISO/IEC 42001:2023 is the first international standard for Artificial Intelligence Management Systems (AIMS). It provides requirements for establishing, implementing, maintaining, and improving AIMS, focusing on the responsible use, governance, and risk management of AI across organizations.

ISO/IEC • v2023

View details
CybersecurityFrameworkControl set

SOC2 — SOC2 Trusted Services Criteria

SOC 2 is a framework for managing and reporting on controls at service organizations relevant to security, availability, processing integrity, confidentiality, and privacy. It aims to provide detailed information and assurance to stakeholders about how these controls are implemented to protect user data.

American Institute of Certified Public Accountants (AICPA) • United States

View details
CybersecurityStandard

Cyber Essentials Mark — CSA Cybersecurity Certification: Cyber Essentials Mark

The Cyber Essentials (2025) certification is a cybersecurity certification scheme developed by the Cyber Security Agency (CSA) of Singapore. It provides a framework for organisations to enhance their cybersecurity posture, covering areas like classical cybersecurity, cloud security, OT security, and AI security.

Cyber Security Agency of Singapore (CSA) • Singapore • v 04-2025 (Second edition)

View details
AIRegulation

EU AI Act — EU Artificial Intelligence Act

The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive law regulating artificial intelligence. It establishes a risk-based framework that classifies AI systems into four categories—unacceptable, high-risk, limited-risk, and minimal-risk—with stricter obligations applied to higher-risk systems.

European Union • EU • vJanuary 2024

View details
GRCRegulation

EU Data Act — Regulation on harmonised rules on fair access to and use of data (Data Act)

The Data Act is an EU regulation that aims to establish fair rules for access to and use of data generated by connected devices. It promotes data sharing, safeguards user rights, and prevents unfair practices while supporting innovation and the data economy.

European Commission • EU • v(EU) 2023/2854

View details
GRCGuideline

RG 175 — RG 175 AFS licensing: Financial product advisers—Conduct and disclosure

This regulatory guide outlines the conduct and disclosure obligations of financial product advisers who provide advice to retail clients in Australia. It focuses on requirements under Part 7.7 and Division 2 of Part 7.7A of the Corporations Act.

Australian Securities and Investments Commission (ASIC) • Australia

View details
CybersecurityStandard

UAE IA V2 — UAE Information Assurance Standard Version 2

The UAE Information Assurance Standard Version 2 (UAE IA V2) is a national cybersecurity framework issued by the UAE Cyber Security Council in 2025. It builds upon the previous version with updated controls and integrations to address modern technologies, such as AI/ML, IoT, cloud, and post-quantum cryptography.

UAE Cyber Security Council • United Arab Emirates • v2.0

View details
GRCGuideline

RG 271 — Regulatory Guide: 271 Internal Dispute Resolution

This regulatory guide outlines enforceable standards and requirements for internal dispute resolution (IDR) systems for financial firms in Australia. It specifies the obligations these firms must meet to comply with ASIC's IDR standards.

Australian Securities and Investments Commission (ASIC) • Australia

View details
AIStandard

AIUC-1 — AIUC-1

AIUC-1 is a standard focused on the security, safety, and reliability of AI agents used in enterprises. It addresses risks related to data privacy, security, accountability, and societal concerns while providing certification for compliant organizations.

Artificial Intelligence Underwriting Company (AIUC) • vApril 15, 2026

View details
CybersecurityGuideline

NIST SP 800-161 Rev. 1 — NIST Special Publication 800-161 Rev. 1 - Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations

This publication provides guidance on identifying, assessing, and mitigating cybersecurity risks throughout the supply chain. It integrates Cybersecurity Supply Chain Risk Management (C-SCRM) practices into organizational risk management processes.

National Institute of Standards and Technology (NIST) • United States • vRev. 1, Update 1

View details

Partner directory

Certified resellers, integrators and advisors to help you implement and manage your GRC program.

Explore all partners (88)

Ready to manage these frameworks?

6clicks maps regulations to controls, evidence and risks — automatically.

Book your strategy call